CVE-2026-41030

MEDIUM

ONLYOFFICE DesktopEditors <9.3.0 - Privilege Escalation

Title source: llm

Description

In ONLYOFFICE DesktopEditors before 9.3.0, the update service allows attackers to perform actions on files with SYSTEM privileges.

References (1)

Scores

CVSS v3 6.2
EPSS 0.0001
EPSS Percentile 0.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-669
Status published
Products (1)
Ascensio/ONLYOFFICE DesktopEditors < 9.3.0
Published Apr 16, 2026
Tracked Since Apr 16, 2026